Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

This rule appears in the C Secure Coding Standard as MSC18-C. Be careful while handling sensitive data, such as passwords, in program code

Related Guidelines

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="13db91de-87cd-486a-8b33-edb6f927d39f"><ac:plain-text-body><![CDATA[

[[MITRE 2009

AA. Bibliography#MITRE 09]]

[CWE-259

http://cwe.mitre.org/data/definitions/259.html] "Use of Hard-coded Password"

]]></ac:plain-text-body></ac:structured-macro>

 

CWE-798 "Use of Hard-coded Credentials"

Bibliography

<ac:structured-macro ac:name="unmigrated-wiki-markup

...

" ac:schema-version="1" ac:macro-id="9f2544a0-3f92-4a57-a9e6-9185540cd398"><ac:plain-text-body><![CDATA[

[[Chess

...

2007

...

AA.

...

Bibliography#Chess

...

07]

...

]

...

11.2

...

Outbound

...

Passwords:

...

Keep

...

Passwords

...

out

...

of

...

Source

...

Code

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="a3e3f9a9-8747-4f67-9e28-763c49851660"><ac:plain-text-body><![CDATA[

[[Fortify 2008

AA. Bibliography#Fortify 08]]

"Unsafe Mobile Code: Database Access"

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="a63cb5ac-ab39-4be5-bc0d-3e831a628272"><ac:plain-text-body><![CDATA[

[[Gong 2003

AA. Bibliography#Gong 03]]

9.4 Private Object State and Object Immutability

]]></ac:plain-text-body></ac:structured-macro>

...

      49. Miscellaneous (MSC)      MSC05-J. Store passwords using a hash function